android_hid

androidhid Use Android as Rubber Ducky against targeted Android device or PC HID attack using Android Using Android as Rubber Ducky against Android or Windows. This is not a new technique, just a demo how to perform HID attack using Android instead of rubber ducky. For targeted Android device it ...

Lock-Picking-Robot

🔑 Unlocked 🔑 Introducción Antecedentes Un robot open source para abrir cerraduras. Básicamente, existen muchas llaves maestras el ejemplo más común es la TSA 007, lo cual es malo. Tener una llave que puede abrir MUCHAS cerraduras diferentes, especialmente sin que los dueños de las cerraduras sepa...

AutoProber

AutoProber AutoProber es el stack de automatización de sondas voladoras para hackers de hardware, que le da a tu agente todo lo que necesita para pasar de "hay un nuevo objetivo en la placa" a sondear pines individuales de forma segura. Video de demostración:...

Android-PIN-Bruteforce

🔓📱 Android-PIN-Bruteforce Desbloquea un teléfono Android o dispositivo mediante fuerza bruta en el PIN de la pantalla de bloqueo. Convierte tu teléfono Kali Nethunter en un cracker de PIN por fuerza bruta para dispositivos Android! 📱 Cómo funciona Usa un cable USB OTG para conectar el teléfono...

ssh-tpm-agent

Agente SSH para TPM ssh-tpm-agent es un agente compatible con ssh-agent que permite crear claves mediante el Módulo de Plataforma Confiable TPM para autenticación hacia servidores ssh. Las claves selladas por TPM son claves privadas creadas dentro del Módulo de Plataforma Confiable TPM y selladas...

tiny_tracer

tinytracer Una herramienta Pin para rastrear: llamadas a la API, incluyendo entrada y salida de funciones seleccionadas funciones locales definidas, y funciones de bibliotecas enlazadas estáticamente...

awind-research

Awind Research This repository holds interesting bits and pieces related to research I performed on wireless presentation devices manufactured by Awindinc and OEM'ed to multiple manufacturers. The repository is split into these subsections: hardware - hardware hacking stuff, mostly for MMC dumpin...

mimikatz

mimikatz mimikatz is a tool I've made to learn C and make somes experiments with Windows security. It's now well known to extract plaintexts passwords, hash, PIN code and kerberos tickets from memory. mimikatz can also perform pass-the-hash, pass-the-ticket or build Golden tickets. root@kitploit:...

pixiewps

Resumen Pixiewps es una herramienta escrita en C utilizada para realizar un ataque de fuerza bruta fuera de línea al PIN de WPS aprovechando la baja o nula entropía de algunas implementaciones de software, el llamado "ataque pixie-dust" descubierto por Dominique Bongard en el verano de 2014. Está...

dragondance

Dragon Dance ¿Qué es eso? Dragon Dance es un plugin para Ghidra para visualizar y manipular los datos de cobertura de código binario. Los datos de cobertura pueden importarse de múltiples fuentes de cobertura. Por ahora, el plugin es compatible con las herramientas de instrumentación binaria...

HT-WPS-Breaker

HT-WPS BREAKER Languages: English High Touch WPS Breaker HT-WB is a small tool based on the bash script language, it can help you to extract the wps pin of many vulnerable routers and get the password, in the last i want to notice that HT-WPS Breaker in its process is using these tools :...

manul

Manul Manul is a coverage-guided parallel fuzzer for open-source and black-box binaries on Windows, Linux and macOS beta written in pure Python. Quick Start root@kitploit: pip3 install psutil git clone https://github.com/mxmssh/manul cd manul mkdir in mkdir out echo "AAAAAA" in/test python3...

CVE-2024-41276

CVE-2024-41276 Kaiten Authentication Bypass Kaiten - a workflow management system. A vulnerability in Kaiten allows attackers to bypass the PIN code authentication mechanism. The application requires users to input a 6-digit PIN code sent to their email for authorization after entering their logi...

CVE-2026-6992-PoC

CVE-2026-6992-PoC Vulnerability proof of concept for the bluetooth pin RCE injection CVE-2026-6992 reworked from https://github.com/utmost3/cve/issues/2 I take no credit for discovering the vulnerability. This is for educational and portfolio purposes only. For devices that do not have management...

CVE-2020-27747

CVE-2020-27747 Possible Account Takeover | Brute Force Ability Suggested description An issue was discovered in Click Studios Passwordstate 8.9 Build 8973. If the user of the system has assigned himself a PIN code for entering from a mobile device using the built-in generator 4 digits, a remote...

humane-aipin-ghostlock

GhostLock for Humane AI Pin GhostLock for Humane AI Pin is an open-source, boot-scoped root proof of concept for one exact retail firmware build. It exercises CVE-2026-43499, a Linux rtmutex use-after-free, from an ordinary authorized ADB shell. The runner is deliberately narrow. It checks the...

Exploit for Use After Free in Linux Linux_Kernel

GhostLock for Humane AI Pin GhostLock for Humane AI Pin is an...

lockphish

Lockphish v2.0 Lockphish it's the first tool 07/04/2020 for phishing attacks on the lock screen, designed to grab Windows credentials, Android PIN and iPhone Passcode using a https link. LockPhish Tutorial: https://www.kalilinux.in/2020/05/lockphish.html Author: The Linux Choice Who deleted his...

Linux Distros Unpatched Vulnerability : CVE-2026-90258

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pinctrl: airoha: add missed IRQ resource helpers Without hooking .irqrequestresources, gpiolib cannot set GPIODFLAGUSEDASIRQ. This breaks pin direction locking...

CVE-2026-90258

In the Linux kernel, the following vulnerability has been resolved: pinctrl: airoha: add missed IRQ resource helpers Without hooking .irqrequestresources, gpiolib cannot set GPIODFLAGUSEDASIRQ. This breaks pin direction locking and can allow userspace or another driver to reconfigure an active IR...